first commit

app/Console/Commands/FetchExerciseDbDataCommand.php

@@ -0,0 +1,187 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Models\BodyPart;
+use App\Models\Equipment;
+use App\Models\Exercise;
+use App\Models\Muscle;
+use App\Services\ExerciseDb\ApiService;
+use Illuminate\Console\Command;
+use Illuminate\Support\Str;
+
+class FetchExerciseDbDataCommand extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'fetch:exercise';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Fetch all exercises from ExerciseDB API and store them locally.';
+
+    private ApiService $apiService;
+
+    public function __construct(ApiService $apiService)
+    {
+        $this->apiService = $apiService;
+
+        parent::__construct();
+    }
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(): int
+    {
+        $page = 1;
+        $stored = 0;
+        $updated = 0;
+
+        $this->info('Fetching exercises from ExerciseDB...');
+
+        while (true) {
+            $results = $this->apiService->fetch($page);
+
+            $results = $results['data'];
+
+            $count = count($results);
+            if ($count === 0) {
+                break;
+            }
+
+            [$s, $u] = $this->process($results);
+            $stored += $s;
+            $updated += $u;
+
+            $this->info("Processed page {$page} with {$count} items.");
+
+            if ($count < ApiService::PER_PAGE) {
+                break;
+            }
+
+            $page++;
+            sleep(5);
+        }
+
+        $this->info("Done. Created {$stored}, updated {$updated} exercises.");
+
+        return self::SUCCESS;
+    }
+
+    /**
+     * @param array<int, array<string, mixed>> $results
+     * @return array{int,int} [created, updated]
+     */
+    private function process(array $results): array
+    {
+        $created = 0;
+        $updated = 0;
+
+        foreach ($results as $item) {
+            $exerciseDbId = (string)($item['exerciseId'] ?? '');
+            if ($exerciseDbId === '') {
+                continue;
+            }
+
+            $name = (string)($item['name'] ?? '');
+            $gifUrl = (string)($item['gifUrl'] ?? '');
+
+            $instructions = $item['instructions'] ?? [];
+            if (is_array($instructions)) {
+                $instructionsText = implode("\n", array_filter(array_map('strval', $instructions)));
+            } else {
+                $instructionsText = (string)$instructions;
+            }
+
+            $slug = Str::slug($name) ?: $exerciseDbId;
+
+            $values = [
+                'name' => $name,
+                'slug' => $slug,
+                'gif_url' => $gifUrl,
+                'instructions' => $instructionsText,
+            ];
+
+            $existing = Exercise::where('exercise_db_id', $exerciseDbId)->first();
+            $exercise = Exercise::updateOrCreate(
+                ['exercise_db_id' => $exerciseDbId],
+                $values,
+            );
+
+            if ($existing) { $updated++; } else { $created++; }
+
+            // Relations
+            // Body part (string)
+            $bodyPartVal = $item['bodyPart'] ?? null;
+            $bodyPartIds = [];
+            if ($bodyPartVal) {
+                $bodyParts = is_array($bodyPartVal) ? $bodyPartVal : [$bodyPartVal];
+                foreach ($bodyParts as $bp) {
+                    $bpName = (string)$bp;
+                    $bpSlug = Str::slug($bpName);
+                    $bpModel = BodyPart::firstOrCreate(['slug' => $bpSlug], ['name' => $bpName]);
+                    $bodyPartIds[] = $bpModel->id;
+                }
+            }
+            if ($bodyPartIds) {
+                $exercise->bodyParts()->sync($bodyPartIds);
+            }
+
+            // Target muscle (string)
+            $targetVal = $item['target'] ?? null;
+            $targetIds = [];
+            if ($targetVal) {
+                $targets = is_array($targetVal) ? $targetVal : [$targetVal];
+                foreach ($targets as $tm) {
+                    $mName = (string)$tm;
+                    $mSlug = Str::slug($mName);
+                    $mModel = Muscle::firstOrCreate(['slug' => $mSlug], ['name' => $mName]);
+                    $targetIds[] = $mModel->id;
+                }
+            }
+            if ($targetIds) {
+                $exercise->targetMuscles()->sync($targetIds);
+            }
+
+            // Secondary muscles (array)
+            $secVal = $item['secondaryMuscles'] ?? [];
+            $secondaryIds = [];
+            if (!is_array($secVal)) { $secVal = [$secVal]; }
+            foreach ($secVal as $sm) {
+                $smName = (string)$sm;
+                if ($smName === '') { continue; }
+                $smSlug = Str::slug($smName);
+                $mModel = Muscle::firstOrCreate(['slug' => $smSlug], ['name' => $smName]);
+                $secondaryIds[] = $mModel->id;
+            }
+            if ($secondaryIds) {
+                $exercise->secondaryMuscles()->sync($secondaryIds);
+            }
+
+            // Equipment (string or array depending on source variant)
+            $equipVal = $item['equipment'] ?? null;
+            $equipmentIds = [];
+            if ($equipVal) {
+                $equipments = is_array($equipVal) ? $equipVal : [$equipVal];
+                foreach ($equipments as $eq) {
+                    $eqName = (string)$eq;
+                    $eqSlug = Str::slug($eqName);
+                    $eqModel = Equipment::firstOrCreate(['slug' => $eqSlug], ['name' => $eqName]);
+                    $equipmentIds[] = $eqModel->id;
+                }
+            }
+            if ($equipmentIds) {
+                $exercise->equipments()->sync($equipmentIds);
+            }
+        }
+
+        return [$created, $updated];
+    }
+}

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Auth\LoginRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\View\View;
+
+class AuthenticatedSessionController extends Controller
+{
+    /**
+     * Display the login view.
+     */
+    public function create(): View
+    {
+        return view('auth.login');
+    }
+
+    /**
+     * Handle an incoming authentication request.
+     */
+    public function store(LoginRequest $request): RedirectResponse
+    {
+        $request->authenticate();
+
+        $request->session()->regenerate();
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+
+    /**
+     * Destroy an authenticated session.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        Auth::guard('web')->logout();
+
+        $request->session()->invalidate();
+
+        $request->session()->regenerateToken();
+
+        return redirect('/');
+    }
+}

app/Http/Controllers/Auth/ConfirmablePasswordController.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\ValidationException;
+use Illuminate\View\View;
+
+class ConfirmablePasswordController extends Controller
+{
+    /**
+     * Show the confirm password view.
+     */
+    public function show(): View
+    {
+        return view('auth.confirm-password');
+    }
+
+    /**
+     * Confirm the user's password.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! Auth::guard('web')->validate([
+            'email' => $request->user()->email,
+            'password' => $request->password,
+        ])) {
+            throw ValidationException::withMessages([
+                'password' => __('auth.password'),
+            ]);
+        }
+
+        $request->session()->put('auth.password_confirmed_at', time());
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/EmailVerificationNotificationController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+
+class EmailVerificationNotificationController extends Controller
+{
+    /**
+     * Send a new email verification notification.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false));
+        }
+
+        $request->user()->sendEmailVerificationNotification();
+
+        return back()->with('status', 'verification-link-sent');
+    }
+}

app/Http/Controllers/Auth/EmailVerificationPromptController.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\View\View;
+
+class EmailVerificationPromptController extends Controller
+{
+    /**
+     * Display the email verification prompt.
+     */
+    public function __invoke(Request $request): RedirectResponse|View
+    {
+        return $request->user()->hasVerifiedEmail()
+                    ? redirect()->intended(route('dashboard', absolute: false))
+                    : view('auth.verify-email');
+    }
+}

app/Http/Controllers/Auth/NewPasswordController.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rules;
+use Illuminate\View\View;
+
+class NewPasswordController extends Controller
+{
+    /**
+     * Display the password reset view.
+     */
+    public function create(Request $request): View
+    {
+        return view('auth.reset-password', ['request' => $request]);
+    }
+
+    /**
+     * Handle an incoming new password request.
+     *
+     * @throws \Illuminate\Validation\ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'token' => ['required'],
+            'email' => ['required', 'email'],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        // Here we will attempt to reset the user's password. If it is successful we
+        // will update the password on an actual user model and persist it to the
+        // database. Otherwise we will parse the error and return the response.
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function (User $user) use ($request) {
+                $user->forceFill([
+                    'password' => Hash::make($request->password),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        // If the password was successfully reset, we will redirect the user back to
+        // the application's home authenticated view. If there is an error we can
+        // redirect them back to where they came from with their error message.
+        return $status == Password::PASSWORD_RESET
+                    ? redirect()->route('login')->with('status', __($status))
+                    : back()->withInput($request->only('email'))
+                        ->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/PasswordController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules\Password;
+
+class PasswordController extends Controller
+{
+    /**
+     * Update the user's password.
+     */
+    public function update(Request $request): RedirectResponse
+    {
+        $validated = $request->validateWithBag('updatePassword', [
+            'current_password' => ['required', 'current_password'],
+            'password' => ['required', Password::defaults(), 'confirmed'],
+        ]);
+
+        $request->user()->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        return back()->with('status', 'password-updated');
+    }
+}

app/Http/Controllers/Auth/PasswordResetLinkController.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+use Illuminate\View\View;
+
+class PasswordResetLinkController extends Controller
+{
+    /**
+     * Display the password reset link request view.
+     */
+    public function create(): View
+    {
+        return view('auth.forgot-password');
+    }
+
+    /**
+     * Handle an incoming password reset link request.
+     *
+     * @throws \Illuminate\Validation\ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'email' => ['required', 'email'],
+        ]);
+
+        // We will send the password reset link to this user. Once we have attempted
+        // to send the link, we will examine the response then see the message we
+        // need to show to the user. Finally, we'll send out a proper response.
+        $status = Password::sendResetLink(
+            $request->only('email')
+        );
+
+        return $status == Password::RESET_LINK_SENT
+                    ? back()->with('status', __($status))
+                    : back()->withInput($request->only('email'))
+                        ->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules;
+use Illuminate\View\View;
+
+class RegisteredUserController extends Controller
+{
+    /**
+     * Display the registration view.
+     */
+    public function create(): View
+    {
+        return view('auth.register');
+    }
+
+    /**
+     * Handle an incoming registration request.
+     *
+     * @throws \Illuminate\Validation\ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'name' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'string', 'lowercase', 'email', 'max:255', 'unique:'.User::class],
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        event(new Registered($user));
+
+        Auth::login($user);
+
+        return redirect(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+
+class VerifyEmailController extends Controller
+{
+    /**
+     * Mark the authenticated user's email address as verified.
+     */
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+        }
+
+        if ($request->user()->markEmailAsVerified()) {
+            event(new Verified($request->user()));
+        }
+
+        return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+    }
+}

app/Http/Controllers/BlogController.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class BlogController extends Controller
+{
+    //
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Controllers/ExerciseController.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\BodyPart;
+use App\Models\Equipment;
+use App\Models\Exercise;
+use App\Models\Muscle;
+use Illuminate\Http\Request;
+
+class ExerciseController extends Controller
+{
+    public function index(Request $request)
+    {
+        $q = trim((string) $request->query('q', ''));
+        $bodypart = (string) $request->query('bodypart', '');
+        $muscle = (string) $request->query('muscle', '');
+        $equipment = (string) $request->query('equipment', '');
+        $perPage = (int) ($request->query('per_page', 12));
+        if ($perPage < 6 || $perPage > 60) { $perPage = 12; }
+
+        $query = Exercise::query()
+            ->with(['bodyParts:id,name,slug', 'targetMuscles:id,name,slug', 'secondaryMuscles:id,name,slug', 'equipments:id,name,slug'])
+            ->when($q !== '', function ($qBuilder) use ($q) {
+                $qBuilder->where(function ($sub) use ($q) {
+                    $sub->where('name', 'like', "%{$q}%")
+                        ->orWhere('instructions', 'like', "%{$q}%");
+                });
+            })
+            ->when($bodypart !== '', function ($qBuilder) use ($bodypart) {
+                $qBuilder->whereHas('bodyParts', function ($rel) use ($bodypart) {
+                    $rel->where('slug', $bodypart);
+                });
+            })
+            ->when($muscle !== '', function ($qBuilder) use ($muscle) {
+                $qBuilder->where(function ($sub) use ($muscle) {
+                    $sub->whereHas('targetMuscles', function ($rel) use ($muscle) { $rel->where('slug', $muscle); })
+                        ->orWhereHas('secondaryMuscles', function ($rel) use ($muscle) { $rel->where('slug', $muscle); });
+                });
+            })
+            ->when($equipment !== '', function ($qBuilder) use ($equipment) {
+                $qBuilder->whereHas('equipments', function ($rel) use ($equipment) {
+                    $rel->where('slug', $equipment);
+                });
+            })
+            ->orderBy('name');
+
+        $exercises = $query->paginate($perPage)->withQueryString();
+
+        $bodyParts = BodyPart::query()->orderBy('name')->get(['id','name','slug']);
+        $muscles = Muscle::query()->orderBy('name')->get(['id','name','slug']);
+        $equipments = Equipment::query()->orderBy('name')->get(['id','name','slug']);
+
+        return view('exercises.index', [
+            'exercises' => $exercises,
+            'filters' => [
+                'q' => $q,
+                'bodypart' => $bodypart,
+                'muscle' => $muscle,
+                'equipment' => $equipment,
+                'per_page' => $perPage,
+            ],
+            'bodyParts' => $bodyParts,
+            'muscles' => $muscles,
+            'equipments' => $equipments,
+        ]);
+    }
+
+    public function show(Exercise $exercise)
+    {
+        $exercise->load(['bodyParts:id,name,slug', 'targetMuscles:id,name,slug', 'secondaryMuscles:id,name,slug', 'equipments:id,name,slug']);
+        return view('exercises.show', [
+            'exercise' => $exercise,
+        ]);
+    }
+}

app/Http/Controllers/HomeController.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\BodyPart;
+use App\Models\Equipment;
+use App\Models\Exercise;
+use App\Models\Muscle;
+use Illuminate\Http\Request;
+
+class HomeController extends Controller
+{
+    public function index(Request $request)
+    {
+        $exerciseCount = Exercise::query()->count();
+
+        $bodyParts = BodyPart::query()->orderBy('name')->limit(12)->get(['id','name','slug']);
+        $equipments = Equipment::query()->orderBy('name')->limit(12)->get(['id','name','slug']);
+        $muscles = Muscle::query()->orderBy('name')->limit(12)->get(['id','name','slug']);
+
+        // Placeholder featured workouts. If a Workout model exists, we could replace this later.
+        $featuredWorkouts = [
+            [
+                'title' => 'Full-Body Starter',
+                'level' => 'Beginner',
+                'duration' => 30,
+                'focus' => 'Full Body',
+                'slug' => 'full-body-starter',
+            ],
+            [
+                'title' => 'Push Day Power',
+                'level' => 'Intermediate',
+                'duration' => 45,
+                'focus' => 'Chest, Shoulders, Triceps',
+                'slug' => 'push-day-power',
+            ],
+            [
+                'title' => 'Legs & Glutes Burner',
+                'level' => 'Intermediate',
+                'duration' => 40,
+                'focus' => 'Quads, Hamstrings, Glutes',
+                'slug' => 'legs-glutes-burner',
+            ],
+        ];
+
+        return view('home.index', compact(
+            'exerciseCount', 'bodyParts', 'equipments', 'muscles', 'featuredWorkouts'
+        ));
+    }
+}

app/Http/Controllers/ProfileController.php

@@ -0,0 +1,60 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\ProfileUpdateRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Redirect;
+use Illuminate\View\View;
+
+class ProfileController extends Controller
+{
+    /**
+     * Display the user's profile form.
+     */
+    public function edit(Request $request): View
+    {
+        return view('profile.edit', [
+            'user' => $request->user(),
+        ]);
+    }
+
+    /**
+     * Update the user's profile information.
+     */
+    public function update(ProfileUpdateRequest $request): RedirectResponse
+    {
+        $request->user()->fill($request->validated());
+
+        if ($request->user()->isDirty('email')) {
+            $request->user()->email_verified_at = null;
+        }
+
+        $request->user()->save();
+
+        return Redirect::route('profile.edit')->with('status', 'profile-updated');
+    }
+
+    /**
+     * Delete the user's account.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        $request->validateWithBag('userDeletion', [
+            'password' => ['required', 'current_password'],
+        ]);
+
+        $user = $request->user();
+
+        Auth::logout();
+
+        $user->delete();
+
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return Redirect::to('/');
+    }
+}

app/Http/Controllers/WorkoutController.php

@@ -0,0 +1,110 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Exercise;
+use App\Models\Workout;
+use App\Models\WorkoutExercise;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class WorkoutController extends Controller
+{
+    public function __construct()
+    {
+        //$this->middleware('auth');
+    }
+
+    public function index()
+    {
+        $workouts = Auth::user()->workouts()->latest()->paginate(10);
+        return view('workouts.index', compact('workouts'));
+    }
+
+    public function create()
+    {
+        // Simple create form (builder-like)
+        return view('workouts.create');
+    }
+
+    public function store(Request $request)
+    {
+        $data = $request->validate([
+            'title' => 'required|string|max:255',
+            'notes' => 'nullable|string',
+            'estimated_minutes' => 'nullable|integer|min:1|max:600',
+        ]);
+        $workout = Auth::user()->workouts()->create($data);
+        return redirect()->route('workouts.show', $workout)->with('status', 'Workout created');
+    }
+
+    public function show(Workout $workout)
+    {
+        $this->authorizeWorkout($workout);
+        $workout->load(['items.exercise']);
+        $exercises = Exercise::orderBy('name')->limit(50)->get(['id','name','slug']);
+        return view('workouts.show', compact('workout', 'exercises'));
+    }
+
+    // Legacy builder route -> redirect to create
+    public function builder()
+    {
+        return redirect()->route('workouts.create');
+    }
+
+    public function addExercise(Request $request, Workout $workout)
+    {
+        $this->authorizeWorkout($workout);
+        $data = $request->validate([
+            'exercise_id' => 'required|exists:exercises,id',
+            'position' => 'nullable|integer|min:1',
+            'sets' => 'nullable|integer|min:1|max:20',
+            'reps' => 'nullable|integer|min:1|max:200',
+            'weight' => 'nullable|numeric|min:0|max:999.99',
+            'rest_seconds' => 'nullable|integer|min:0|max:600',
+            'notes' => 'nullable|string',
+        ]);
+        $nextPos = ($workout->items()->max('position') ?? 0) + 1;
+        $data['position'] = $data['position'] ?? $nextPos;
+        $item = $workout->items()->create($data);
+        return back()->with('status', 'Exercise added to workout');
+    }
+
+    public function updateExercise(Request $request, Workout $workout, WorkoutExercise $item)
+    {
+        $this->authorizeWorkout($workout);
+        if ($item->workout_id !== $workout->id) { abort(404); }
+        $data = $request->validate([
+            'position' => 'nullable|integer|min:1',
+            'sets' => 'nullable|integer|min:1|max:20',
+            'reps' => 'nullable|integer|min:1|max:200',
+            'weight' => 'nullable|numeric|min:0|max:999.99',
+            'rest_seconds' => 'nullable|integer|min:0|max:600',
+            'notes' => 'nullable|string',
+        ]);
+        $item->update($data);
+        return back()->with('status', 'Exercise updated');
+    }
+
+    public function removeExercise(Workout $workout, WorkoutExercise $item)
+    {
+        $this->authorizeWorkout($workout);
+        if ($item->workout_id !== $workout->id) { abort(404); }
+        $item->delete();
+        return back()->with('status', 'Exercise removed');
+    }
+
+    public function destroy(Workout $workout)
+    {
+        $this->authorizeWorkout($workout);
+        $workout->delete();
+        return redirect()->route('workouts.index')->with('status', 'Workout deleted');
+    }
+
+    protected function authorizeWorkout(Workout $workout): void
+    {
+        if ($workout->user_id !== Auth::id()) {
+            abort(403);
+        }
+    }
+}

app/Http/Requests/Auth/LoginRequest.php

@@ -0,0 +1,85 @@
+<?php
+
+namespace App\Http\Requests\Auth;
+
+use Illuminate\Auth\Events\Lockout;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+
+class LoginRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email'],
+            'password' => ['required', 'string'],
+        ];
+    }
+
+    /**
+     * Attempt to authenticate the request's credentials.
+     *
+     * @throws \Illuminate\Validation\ValidationException
+     */
+    public function authenticate(): void
+    {
+        $this->ensureIsNotRateLimited();
+
+        if (! Auth::attempt($this->only('email', 'password'), $this->boolean('remember'))) {
+            RateLimiter::hit($this->throttleKey());
+
+            throw ValidationException::withMessages([
+                'email' => trans('auth.failed'),
+            ]);
+        }
+
+        RateLimiter::clear($this->throttleKey());
+    }
+
+    /**
+     * Ensure the login request is not rate limited.
+     *
+     * @throws \Illuminate\Validation\ValidationException
+     */
+    public function ensureIsNotRateLimited(): void
+    {
+        if (! RateLimiter::tooManyAttempts($this->throttleKey(), 5)) {
+            return;
+        }
+
+        event(new Lockout($this));
+
+        $seconds = RateLimiter::availableIn($this->throttleKey());
+
+        throw ValidationException::withMessages([
+            'email' => trans('auth.throttle', [
+                'seconds' => $seconds,
+                'minutes' => ceil($seconds / 60),
+            ]),
+        ]);
+    }
+
+    /**
+     * Get the rate limiting throttle key for the request.
+     */
+    public function throttleKey(): string
+    {
+        return Str::transliterate(Str::lower($this->string('email')).'|'.$this->ip());
+    }
+}

app/Http/Requests/ProfileUpdateRequest.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Models\User;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class ProfileUpdateRequest extends FormRequest
+{
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'name' => ['required', 'string', 'max:255'],
+            'email' => [
+                'required',
+                'string',
+                'lowercase',
+                'email',
+                'max:255',
+                Rule::unique(User::class)->ignore($this->user()->id),
+            ],
+        ];
+    }
+}

app/Models/BodyPart.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class BodyPart extends Model
+{
+    protected $fillable = [
+        'name',
+        'slug',
+    ];
+}

app/Models/Equipment.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Equipment extends Model
+{
+    protected $fillable = [
+        'name',
+        'slug',
+    ];
+
+    protected $table = 'equipment';
+}

app/Models/Exercise.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Exercise extends Model
+{
+    protected $fillable = [
+        'name',
+        'slug',
+        'exercise_db_id',
+        'gif_url',
+        'instructions',
+    ];
+
+    // relations
+    public function targetMuscles()
+    {
+        return $this->belongsToMany(Muscle::class, 'exercise_target_muscle');
+    }
+
+    public function secondaryMuscles()
+    {
+        return $this->belongsToMany(Muscle::class, 'exercise_secondary_muscle');
+    }
+
+    public function bodyParts()
+    {
+        return $this->belongsToMany(BodyPart::class, 'body_part_exercise');
+    }
+
+    public function equipments()
+    {
+        return $this->belongsToMany(Equipment::class, 'equipment_exercise');
+    }
+
+    public function workoutExercises()
+    {
+        return $this->hasMany(WorkoutExercise::class);
+    }
+}

app/Models/Muscle.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Muscle extends Model
+{
+    protected $fillable = [
+        'name',
+        'slug',
+    ];
+}

app/Models/User.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Models;
+
+// use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+
+class User extends Authenticatable
+{
+    /** @use HasFactory<\Database\Factories\UserFactory> */
+    use HasFactory, Notifiable;
+
+    /**
+     * The attributes that are mass assignable.
+     *
+     * @var list<string>
+     */
+    protected $fillable = [
+        'name',
+        'email',
+        'password',
+    ];
+
+    /**
+     * The attributes that should be hidden for serialization.
+     *
+     * @var list<string>
+     */
+    protected $hidden = [
+        'password',
+        'remember_token',
+    ];
+
+    /**
+     * Get the attributes that should be cast.
+     *
+     * @return array<string, string>
+     */
+    protected function casts(): array
+    {
+        return [
+            'email_verified_at' => 'datetime',
+            'password' => 'hashed',
+        ];
+    }
+
+    // Relationships
+    public function workouts()
+    {
+        return $this->hasMany(Workout::class);
+    }
+}

app/Models/Workout.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+class Workout extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        'user_id',
+        'title',
+        'notes',
+        'estimated_minutes',
+    ];
+
+    protected $casts = [
+        'estimated_minutes' => 'integer',
+    ];
+
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    public function items(): HasMany
+    {
+        return $this->hasMany(WorkoutExercise::class)->orderBy('position');
+    }
+
+    public function exercises(): BelongsToMany
+    {
+        return $this->belongsToMany(Exercise::class, 'workout_exercises')
+            ->withPivot(['id', 'position', 'sets', 'reps', 'weight', 'rest_seconds', 'notes'])
+            ->withTimestamps()
+            ->orderBy('workout_exercises.position');
+    }
+}

app/Models/WorkoutExercise.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+class WorkoutExercise extends Model
+{
+    use HasFactory;
+
+    protected $fillable = [
+        'workout_id',
+        'exercise_id',
+        'position',
+        'sets',
+        'reps',
+        'weight',
+        'rest_seconds',
+        'notes',
+    ];
+
+    protected $casts = [
+        'position' => 'integer',
+        'sets' => 'integer',
+        'reps' => 'integer',
+        'weight' => 'decimal:2',
+        'rest_seconds' => 'integer',
+    ];
+
+    public function workout(): BelongsTo
+    {
+        return $this->belongsTo(Workout::class);
+    }
+
+    public function exercise(): BelongsTo
+    {
+        return $this->belongsTo(Exercise::class);
+    }
+}

app/Providers/AppServiceProvider.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\ServiceProvider;
+
+class AppServiceProvider extends ServiceProvider
+{
+    /**
+     * Register any application services.
+     */
+    public function register(): void
+    {
+        //
+    }
+
+    /**
+     * Bootstrap any application services.
+     */
+    public function boot(): void
+    {
+        //
+    }
+}

app/Services/ExerciseDb/ApiService.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Services\ExerciseDb;
+
+use GuzzleHttp\Client;
+
+class ApiService
+{
+    public const PER_PAGE = 50;
+
+    public const API_BASE_URL = 'https://www.exercisedb.dev';
+    public const EXERCISE_URI = '/api/v1/exercises';
+
+    /**
+     * Fetch a page of exercises from ExerciseDB API.
+     *
+     * @return array<int, array<string, mixed>>
+     */
+    public function fetch(int $page = 1): array
+    {
+        $results = $this->call(
+            self::EXERCISE_URI,
+            $this->pagination($page),
+        );
+
+        $decoded = json_decode($results, true);
+        return is_array($decoded) ? $decoded : [];
+    }
+
+    private function pagination(int $page = 1): array
+    {
+        return [
+            'offset' => ($page - 1) * self::PER_PAGE,
+            'limit' => self::PER_PAGE,
+        ];
+    }
+
+    private function call(
+        string $uri,
+        array $params = [],
+    ): string {
+        $client = new Client();
+
+        $url = self::API_BASE_URL . $uri;
+
+        return $client->request('GET', $url, [
+            'query' => $params,
+        ])->getBody()->getContents();
+    }
+}

app/View/Components/AppLayout.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\View\Components;
+
+use Illuminate\View\Component;
+use Illuminate\View\View;
+
+class AppLayout extends Component
+{
+    /**
+     * Get the view / contents that represents the component.
+     */
+    public function render(): View
+    {
+        return view('layouts.app');
+    }
+}

app/View/Components/GuestLayout.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\View\Components;
+
+use Illuminate\View\Component;
+use Illuminate\View\View;
+
+class GuestLayout extends Component
+{
+    /**
+     * Get the view / contents that represents the component.
+     */
+    public function render(): View
+    {
+        return view('layouts.guest');
+    }
+}